On 6/7/20 4:23 AM, Laura Smith wrote:
> smtpd_recipient_restrictions =
> permit_mynetworks,${indexed}custom_reject,reject_unauth_destination,
> reject_rhsbl_sender
> <OBFUSCATED>.dbl.dq.spamhaus.net=127.0.1.[2;4;5;6],
> reject_rhsbl_helo
> <OBFUSCATED>.dbl.dq.spamhaus.net=127.0.1.[2;4;5;6],
> reject_rhsbl_reverse_client
> <OBFUSCATED>.dbl.dq.spamhaus.net=127.0.1.[2;4;5;6],
> reject_rhsbl_sender
> <OBFUSCATED>.zrd.dq.spamhaus.net=127.0.2.[2..24],
> reject_rhsbl_helo
> <OBFUSCATED>.zrd.dq.spamhaus.net=127.0.2.[2..24],
> reject_rhsbl_reverse_client
> <OBFUSCATED>.zrd.dq.spamhaus.net=127.0.2.[2..24],
> reject_rbl_client
> <OBFUSCATED>.zen.dq.spamhaus.net=127.0.0.[2;3;4..7;10;11]
> smtpd_client_restrictions = reject_rbl_client
> <OBFUSCATED>.zen.dq.spamhaus.net
> postscreen_dnsbl_sites =
> <OBFUSCATED>.zen.dq.spamhaus.net=127.0.0.[2;3;4..7;10;11]
i've switched a postfix install to this^ usage of spamhaus dqs et al.
(hadn't even _noticed_ the dq option since release last year!)
in my logs, i see, e.g.
Jun 8 06:49:08 mx postfix/dnsblog[21103]: addr 151.20.170.84 listed by
domain <OBFUSCATED>.zen.dq.spamhaus.net as 127.0.0.10
with the "<OBFUSCATED>" clearly displayed.
have you a setting/map in postfix that simply prevents/filters the
"<OBFUSCATED>" value from explicit entry in the logs?
i haven't yet _seen_ it in any SMTP reply, reject or otherwise, but would like
to ensure that that doesn't happen either.